CVE-2022-31796

CVE-2022-31796

EPSS 0.9%

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/thorfdbg/libjpeg/commit/187035b9726710b4fe11d565c7808975c930895d https://github.com/thorfdbg/libjpeg/issues/71